Hi ,
I am in a situation , we have 3 search heads clustered using a 3rd party SSL certs placed in web.conf after the splunk web ui is not accessed.
i received 2 certs from a 3rd party company one is , .pem and one is .key certs, i placed those 2 certs under /opt/splunk/etc/auth/xyz folder and then i go to /opt/splunk/etc/system/local folder edited the web.conf and updated it as splunk mentioned
[settings]
enableSplunkWebSSL = true
privKeyPath = /opt/splunk/etc/auth/mycerts/mySplunkWebPrivateKey.key
serverCert = /opt/splunk/etc/auth/mycerts/mySplunkWebCertificate.pem
then i restart the splunk but the UI didnt comes up.
What mistakes i did ? Please if anyone can help will be great ?
↧